kawaandClaude Haiku 4.5
ed41f7f520
Printers and groups (Client) are now scoped to an Owner identified by an opaque
bearer key (secrets.token_urlsafe(32)) stored in an httponly cookie, defaulting
to temporary. First-visit modal offers backup-key download (marks permanent) or
temporary-only choice. /session/restore re-attaches a fresh browser to a saved
key. Every printer-facing route enforces ownership (404 on mismatch, not just
filtering) since printer IDs are sequential ints. Drivers stay global/shared.
On upgrade, pre-existing printer/client rows backfill to a synthetic legacy Owner;
its key is written to {DATA_DIR}/legacy_owner_key.txt for manual restore.
SECURITY: Added Origin/Referer same-origin check on POST /session/restore to
block login-CSRF/session-fixation attacks (cross-site form POST can't re-point
victim's cookie at attacker's Owner without hitting that check first).
Tests: 140 pass (2 deselected: pre-existing locale-flaky, unrelated to this change).
Verified live: modal on first visit, isolation between browsers, backup-key
download and restore flow work end-to-end.
Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
97 lines
2.5 KiB
Python
97 lines
2.5 KiB
Python
"""Peewee ORM models — full schema for phases 1-5."""
|
|
from datetime import UTC, datetime
|
|
|
|
|
|
def _utcnow():
|
|
return datetime.now(UTC).replace(tzinfo=None)
|
|
|
|
from peewee import (
|
|
BooleanField,
|
|
CharField,
|
|
DateTimeField,
|
|
ForeignKeyField,
|
|
IntegerField,
|
|
Model,
|
|
)
|
|
|
|
from imptune.db.database import db
|
|
|
|
|
|
class BaseModel(Model):
|
|
"""Base model that binds all models to the shared db instance."""
|
|
|
|
class Meta:
|
|
database = db
|
|
|
|
|
|
class Owner(BaseModel):
|
|
"""Cookie-scoped identity — no accounts, just an opaque bearer key."""
|
|
|
|
key = CharField(unique=True, index=True)
|
|
is_permanent = BooleanField(default=False)
|
|
created_at = DateTimeField(default=_utcnow)
|
|
|
|
class Meta:
|
|
table_name = "owner"
|
|
|
|
|
|
class Client(BaseModel):
|
|
"""Represents a deployment target (AD client / OU), scoped to an Owner."""
|
|
|
|
name = CharField()
|
|
owner = ForeignKeyField(Owner, backref="clients")
|
|
created_at = DateTimeField(default=_utcnow)
|
|
|
|
class Meta:
|
|
table_name = "client"
|
|
indexes = ((("owner", "name"), True),)
|
|
|
|
|
|
class Driver(BaseModel):
|
|
"""Uploaded printer driver package (content-addressed by SHA256)."""
|
|
|
|
sha256 = CharField(unique=True, index=True)
|
|
original_filename = CharField()
|
|
size_bytes = IntegerField()
|
|
uploaded_at = DateTimeField(default=_utcnow)
|
|
driver_desc = CharField(null=True)
|
|
inf_filename = CharField(null=True)
|
|
architecture = CharField(null=True)
|
|
has_cat_file = BooleanField(default=False)
|
|
|
|
class Meta:
|
|
table_name = "driver"
|
|
|
|
|
|
class Printer(BaseModel):
|
|
"""Printer configuration record."""
|
|
|
|
name = CharField()
|
|
ip_address = CharField()
|
|
port_name = CharField()
|
|
owner = ForeignKeyField(Owner, backref="printers")
|
|
client = ForeignKeyField(Client, null=True, backref="printers")
|
|
driver = ForeignKeyField(Driver, null=True, backref="printers")
|
|
duplex_mode = CharField(default="OneSided")
|
|
color_mode = BooleanField(default=True)
|
|
paper_size = CharField(default="A4")
|
|
collate = BooleanField(default=True)
|
|
created_at = DateTimeField(default=_utcnow)
|
|
updated_at = DateTimeField(default=_utcnow)
|
|
|
|
class Meta:
|
|
table_name = "printer"
|
|
|
|
|
|
class Icon(BaseModel):
|
|
"""Printer icon image (one per printer)."""
|
|
|
|
printer = ForeignKeyField(Printer, unique=True, backref="icons")
|
|
sha256 = CharField()
|
|
original_filename = CharField()
|
|
size_bytes = IntegerField()
|
|
uploaded_at = DateTimeField(default=_utcnow)
|
|
|
|
class Meta:
|
|
table_name = "icon"
|